4 ms·
Someone still needs to solve the "what verifier do I use problem" in a decentralized way, or we're going to see Persona follow OAuth and be dominated by Google,
by erkose 13y ago
Someone still needs to solve the "what verifier do I use problem" in a decentralized way, or we're going to see Persona follow OAuth and be dominated by Google, Facebook, and Twitter accounts.
- callahad 13y agoI think Persona does solve that, or at least, is designed to. Could you say more about what you're thinking? (Persona always prompts you with a completely free-form email input field and routes you to the appropriate provider based on that.)
- erkose 13y agoYou haven't reached the "verifier" step yet, which is step 4 https://developer.mozilla.org/en-US/docs/Mozilla/Persona/Quick_Setup https://developer.mozilla.org/en-US/docs/Mozilla/Persona/Qui...
- callahad 13y agoOh, that. It's completely possible to do all of the verification locally, so you don't have to talk to our hosted verifier. We're working on building libraries to make that easier, but we still want to tweak our data formats a little bit before recommending local verification. In particular, we're watching the IETF's JOSE family of standards pretty closely.
- wmf 13y agoWhen Persona gets integrated into the browser, the browser will remember which email address you want to use.